PyPI/bedrock-agentcore-starter-toolkit CVE-2026-4269: high 7.5, EPSS 0.43%

Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit

Action: Upgrade bedrock-agentcore-starter-toolkit to 0.1.13 or later.

pip install bedrock-agentcore-starter-toolkit==0.1.13

Affected

Fixed versions

Sources

• osv: GHSA-xfhr-q72q-jcrj
• https://github.com/aws/bedrock-agentcore-starter-toolkit/security/advisories/GHSA-xfhr-q72q-jcrj
• https://nvd.nist.gov/vuln/detail/CVE-2026-4269
• https://aws.amazon.com/security/security-bulletins/2026-008-AWS
• https://github.com/aws/bedrock-agentcore-starter-toolkit
• https://github.com/aws/bedrock-agentcore-starter-toolkit/releases/tag/v0.1.13

CVE-2026-4269 · published 2026-03-17T20:34:21Z · modified 2026-07-13T16:43:29.059247926Z · JSON